Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/27 6:17 p.m.•2 views

CVE-2026-116680

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that...

6.4CVSS0.0019EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/27 5:43 p.m.•4 views

EUVD-2026-111277

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that...

6.4CVSS5.9AI score0.0019EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/27 5:43 p.m.•8 views

CVE-2026-116680

HomeBox , a home inventory and organization system, is vulnerable to Server-Side Request Forgery (SSRF) prior to version 0.27.0 . While the application validates generic notifier URLs using ValidateNotifierURL, the underlying shoutrrr component uses http.DefaultClient.Do without a CheckRedirect p...

6.4CVSS5.9AI score0.0019EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/27 5:43 p.m.•10 views

CVE-2026-116680 Homebox generic notifier SSRF via HTTP redirect after URL validation

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that...

6.4CVSS0.0019EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/27 5:43 p.m.•1 views

CVE-2026-116680 Homebox generic notifier SSRF via HTTP redirect after URL validation

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that...

6.4CVSS5.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/27 12:00 a.m.•2 views

PT-2026-127182

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that...

6.4CVSS5.9AI score0.0019EPSS
SaveExploits0References4
Rows per page
Query Builder